This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.mft File: DSkZIlh_dQ94oZeVy9ibxymvF9U.mft (raw, json) Hash identifier: q2QFtcp0GEYiejpkkFIOu+zRShVyajaHnpqL0sdVNMg= Subject key identifier: 63:BE:86:4B:32:85:8B:D2:0A:03:68:58:11:10:B4:FE:3F:4D:37:9D Authority key identifier: 0D:29:19:22:58:7F:75:0F:78:A1:97:95:CB:D8:9B:C7:29:AF:17:D5 Certificate issuer: /CN=0d291922587f750f78a19795cbd89bc729af17d5 Certificate serial: 019B3EDA58E7EC85BE6FF0E95B52A44B85A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSkZIlh_dQ94oZeVy9ibxymvF9U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.mft Manifest number: 1401 Signing time: Sun 21 Dec 2025 03:00:55 +0000 Manifest this update: Sun 21 Dec 2025 03:00:55 +0000 Manifest next update: Mon 22 Dec 2025 03:00:55 +0000 Files and hashes: 1: 1g3YzsLZ5QOCf6qi-eFi1LVqHQ8.roa (hash: +wFJ5tj+lSmxnwgEedsXBX4o8rthXQtXpU++hvEpCkM=) 2: DSkZIlh_dQ94oZeVy9ibxymvF9U.crl (hash: WPbEwCVdwStyvUSKRPIC+9+lUG1tAfV/gNZCkup50mk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.crl rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.mft rsync://rpki.ripe.net/repository/DEFAULT/DSkZIlh_dQ94oZeVy9ibxymvF9U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:58:e7:ec:85:be:6f:f0:e9:5b:52:a4:4b:85:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d291922587f750f78a19795cbd89bc729af17d5 Validity Not Before: Dec 21 03:00:55 2025 GMT Not After : Dec 22 03:00:55 2025 GMT Subject: CN=63be864b32858bd20a0368581110b4fe3f4d379d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:43:92:28:16:8b:89:c4:93:8b:e8:6e:4c:e7: a8:7a:fc:5f:e5:73:f1:8f:0e:a1:29:ee:e3:77:ce: f3:b7:56:c1:20:57:f8:86:54:fe:ff:7a:16:56:91: d4:1e:7c:c1:6d:7f:2e:44:e7:64:32:a1:4f:0e:94: 50:9d:be:56:bb:88:6e:29:3d:10:3c:d9:36:a5:29: 3f:b3:3b:03:bd:0b:23:7b:5a:b9:66:2c:c4:5b:07: c3:0f:53:61:8b:4d:01:89:e1:9d:0b:2d:18:e0:96: e2:ab:b0:cf:9f:fe:68:a5:a3:a4:45:74:72:e2:c7: 14:be:4a:b8:b8:1d:c0:b2:78:b1:72:68:41:e2:a5: d5:91:d4:b3:ce:f4:8a:87:95:0d:ed:cf:19:f8:bf: 02:a3:0c:7a:2d:48:ac:09:0c:a3:a6:e6:15:78:de: b7:1b:26:38:4d:2a:6b:d2:56:6e:a8:cc:8c:e5:c7: 2d:39:37:e2:24:e7:af:99:6d:d6:c1:bd:dc:8a:d5: 41:fb:11:0b:f6:51:db:7c:bc:c5:79:a5:bf:19:e2: e7:c4:2f:bd:5a:7f:6c:5c:bb:9e:91:78:35:85:96: 39:b9:ea:4b:9b:37:e8:33:1f:05:b3:7b:a9:d7:44: 73:69:1f:13:46:fc:79:91:9e:3a:a4:33:7c:b0:9f: 59:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:BE:86:4B:32:85:8B:D2:0A:03:68:58:11:10:B4:FE:3F:4D:37:9D X509v3 Authority Key Identifier: keyid:0D:29:19:22:58:7F:75:0F:78:A1:97:95:CB:D8:9B:C7:29:AF:17:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSkZIlh_dQ94oZeVy9ibxymvF9U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:75:fa:82:1b:4e:86:96:55:bd:39:84:c3:da:77:f8:04:52: 0c:59:23:77:7e:23:7b:f4:53:29:e3:ce:da:77:14:4f:9e:0f: 44:86:05:9b:df:c4:42:70:04:37:12:de:05:ae:f9:83:90:16: 2b:1e:4c:48:6c:45:4d:7c:40:28:4b:09:9c:18:d4:ae:e5:0a: 4a:cf:a9:d2:7e:03:c1:4d:65:c8:ca:a2:81:ca:67:4d:c2:78: 30:93:a4:06:56:52:5f:11:aa:ac:6a:86:bd:7e:53:67:45:40: 4a:72:7a:fd:37:c4:e8:1b:7c:8e:ff:a8:8a:fe:40:f5:fa:f7: 3a:d2:5a:fe:b6:df:62:db:75:6e:82:9f:f3:e3:1e:15:af:53: db:58:77:f1:d4:f0:40:fe:ca:24:2b:a0:16:fe:03:f0:d1:a0: 08:4f:2f:02:f0:76:79:85:3c:1c:02:94:82:07:26:a0:22:9e: 1c:fc:e3:bc:7a:c9:04:2a:f6:1c:8b:a6:3a:02:fa:5c:33:44: 4c:88:01:16:6c:40:07:8d:f3:50:ab:ad:2b:3f:42:90:40:b8: 09:08:b6:86:be:aa:ff:c2:28:f1:ce:89:f8:9b:c9:3c:73:55: 42:59:a9:55:ab:df:12:bb:71:16:a8:c1:56:7c:78:9d:05:fe: 39:a4:f5:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2ljn7IW+b/DpW1KkS4WnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkMjkxOTIyNTg3Zjc1MGY3OGExOTc5NWNiZDg5YmM3Mjlh ZjE3ZDUwHhcNMjUxMjIxMDMwMDU1WhcNMjUxMjIyMDMwMDU1WjAzMTEwLwYDVQQD Eyg2M2JlODY0YjMyODU4YmQyMGEwMzY4NTgxMTEwYjRmZTNmNGQzNzlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUOSKBaLicSTi+huTOeoevxf5XPx jw6hKe7jd87zt1bBIFf4hlT+/3oWVpHUHnzBbX8uROdkMqFPDpRQnb5Wu4huKT0Q PNk2pSk/szsDvQsje1q5ZizEWwfDD1Nhi00BieGdCy0Y4Jbiq7DPn/5opaOkRXRy 4scUvkq4uB3AsnixcmhB4qXVkdSzzvSKh5UN7c8Z+L8Cowx6LUisCQyjpuYVeN63 GyY4TSpr0lZuqMyM5cctOTfiJOevmW3Wwb3citVB+xEL9lHbfLzFeaW/GeLnxC+9 Wn9sXLuekXg1hZY5uepLmzfoMx8Fs3up10RzaR8TRvx5kZ46pDN8sJ9ZdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGO+hksyhYvSCgNoWBEQtP4/TTedMB8GA1UdIwQY MBaAFA0pGSJYf3UPeKGXlcvYm8cprxfVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFNrWklsaF9kUTk0b1plVnk5aWJ4eW12RjlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My80ZGY4ZjEtMjQxZC00MzM5LWIwZjYt ZDY1YWQ0MzBiZWI3LzEvRFNrWklsaF9kUTk0b1plVnk5aWJ4eW12RjlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My80ZGY4ZjEtMjQxZC00MzM5LWIwZjYtZDY1YWQ0MzBiZWI3 LzEvRFNrWklsaF9kUTk0b1plVnk5aWJ4eW12RjlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkHX6ghtO hpZVvTmEw9p3+ARSDFkjd34je/RTKePO2ncUT54PRIYFm9/EQnAENxLeBa75g5AW Kx5MSGxFTXxAKEsJnBjUruUKSs+p0n4DwU1lyMqigcpnTcJ4MJOkBlZSXxGqrGqG vX5TZ0VASnJ6/TfE6Bt8jv+oiv5A9fr3OtJa/rbfYtt1boKf8+MeFa9T21h38dTw QP7KJCugFv4D8NGgCE8vAvB2eYU8HAKUggcmoCKeHPzjvHrJBCr2HIumOgL6XDNE TIgBFmxAB43zUKutKz9CkEC4CQi2hr6q/8Io8c6J+JvJPHNVQlmpVavfErtxFqjB Vnx4nQX+OaT1Qg== -----END CERTIFICATE-----Generated at Sun Dec 21 07:22:30 2025 by rpki-client